Arm
Vulnerability activity for Arm: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 10
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 20
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 7.4HighJun 7, 2024Arm Mali GPU Kernel Driver Memory corruptionCVE-2024-4610Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.Added to KEV Jun 12, 2024 · 5 days after publicationExploited
- 5.5MediumOct 1, 2023Arm Mali GPU Kernel Driver Memory corruptionCVE-2023-4211Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.Added to KEV Oct 3, 2023 · 1 day after publicationExploited1.1% likelyExploit code
- 8.8HighMay 24, 2021Arm Mali Graphics Processing Unit (GPU) Memory corruptionCVE-2021-29256Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.Added to KEV Jul 7, 2023 · 773 days after publicationExploited3% likely
- 3.3LowApr 6, 2023Arm Mali Graphics Processing Unit (GPU) Denial of serviceCVE-2023-26083Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.Added to KEV Apr 7, 2023 · 1 day after publicationExploited1.2% likelyExploit code
- 7.8HighMar 3, 2022Arm Mali Graphics Processing Unit (GPU) Memory corruptionCVE-2022-22706Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.Added to KEV Mar 30, 2023 · 391 days after publicationExploited1.1% likelyExploit code
- 8.8HighOct 25, 2022Arm Mali Graphics Processing Unit (GPU) Memory corruptionCVE-2022-38181Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.Added to KEV Mar 30, 2023 · 156 days after publicationExploited18% likelyExploit code
- 8.8HighMay 10, 2021Arm Mali Graphics Processing Unit (GPU) Memory corruptionCVE-2021-28663Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.Added to KEV Nov 3, 2021 · 177 days after publicationExploited12% likelyExploit code
- 8.8HighMay 10, 2021Arm Mali Graphics Processing Unit (GPU) Memory corruptionCVE-2021-28664Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes.Added to KEV Nov 3, 2021 · 177 days after publicationExploited5.4% likelyExploit code
- 5.5MediumMay 25, 2021Arm Trusted Firmware Memory corruptionCVE-2021-27562Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers.Added to KEV Nov 3, 2021 · 161 days after publicationExploited3.1% likely
Recent
- 7.7HighSep 8, 2026Arm Bifrost GPU Kernel Driver Denial of serviceCVE-2026-9040A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to cause a denial of service or disclose sensitive information. This issue affects Bifrost GPU Kernel Driver: from r12p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r19p0 through r49p5, from
- 7.8HighSep 8, 2026Arm Bifrost GPU Userspace Driver Memory corruptionCVE-2026-9034Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Bifrost GPU Userspace Driver: from r42p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p3; Valhall GPU Userspace Driver: from r42p0 through r49p5, from r50
- 7.8HighSep 8, 2026Arm Bifrost GPU Kernel Driver Memory corruptionCVE-2026-7477Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r44p0 through r49p4, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r44p0 through r49p5, from r50p0 through r54p3; Arm 5th Gen GPU
- 7.8HighSep 8, 2026Arm Bifrost GPU Kernel Driver Memory corruptionCVE-2026-7476Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r49p3 through r49p5, r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r49p3 through r49p5, from r51p0 through r54p3, r55p0; Arm 5th Gen GPU Architect
- 7.8HighSep 8, 2026Arm Valhall GPU Kernel Driver Memory corruptionCVE-2026-5729Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access already freed memory. This issue affects Valhall GPU Kernel Driver: from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r50p0 through r54p3, r55p0.
- 5.1MediumSep 8, 2026Arm Bifrost GPU Kernel Driver Memory corruptionCVE-2026-12387Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th G
- 4.0MediumSep 8, 2026Arm Bifrost GPU Kernel Driver Memory corruptionCVE-2026-12285Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th G
- 5.1MediumSep 8, 2026Arm Valhall GPU Userspace Driver Memory corruptionCVE-2026-11891Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GPU Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0.
- 7.5HighSep 8, 2026Arm Valhall GPU Kernel Driver Information disclosureCVE-2026-0860Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to sensitive kernel information. This issue affects Valhall GPU Kernel Driver: from r29p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 throu
- 4.4MediumSep 8, 2026Arm Bifrost GPU Kernel Driver Memory corruptionCVE-2026-0001Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th G
- 9.8CriticalApr 2, 2026Arm mbed tls Privilege escalationCVE-2026-34877An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is caused by Incorrect Use of Privileged APIs.
- 9.1CriticalApr 1, 2026Arm mbed tls Crypto / certificateCVE-2026-34872An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using finite-field Diffie-Hellman, the other party can force the shared secret into a small set of values (lack of contributory behavior). This is a problem for protocols that depend on contributory behavior (which is not the case for TLS). The attack can be carried by the peer, or depending on the protocol by an active networ
- 5.1MediumApr 1, 2026Arm mbed tlsCVE-2025-66442In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected.
- 6.7MediumApr 1, 2026Arm mbed tls Crypto / certificateCVE-2026-34871An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number Generator (PRNG).
- 7.7HighApr 1, 2026Arm mbed tlsCVE-2026-25835Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
- 3.6LowMar 2, 2026Arm c1-pro firmwareCVE-2026-0995An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME.
- 7.9HighJan 14, 2026Arm c1-ultra firmwareCVE-2025-0647In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareability domain. In this case, the PE may retain stale TLB entries which should have been invalidated by the TLBI.
- 4.0MediumDec 1, 2025Arm 5th gen gpu architecture kernel driver Memory corruptionCVE-2025-8045Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 through r54p1; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 through r54p1.
- 5.1MediumDec 1, 2025Arm 5th gen gpu architecture kernel driver Memory corruptionCVE-2025-6349Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 through r54p1; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 through r54p1.
- 5.1MediumDec 1, 2025Arm 5th gen gpu architecture kernel driver Information disclosureCVE-2025-2879Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to expose sensitive data.This issue affects Valhall GPU Kernel Driver: from r29p0 through r49p4, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p4, from r50p0 through r54p0.
- 5.3MediumOct 21, 2025Arm mbed tlsCVE-2025-59438Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.
- 6.2MediumOct 20, 2025Arm mbed tlsCVE-2025-54764Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.
- 7.4HighJun 7, 2024Arm Mali GPU Kernel Driver Memory corruptionCVE-2024-4610Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.Exploited
- 5.5MediumOct 1, 2023Arm Mali GPU Kernel Driver Memory corruptionCVE-2023-4211Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.Exploited1.1% likelyExploit code
- 8.8HighMay 24, 2021Arm Mali Graphics Processing Unit (GPU) Memory corruptionCVE-2021-29256Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.Exploited3% likely
- 3.3LowApr 6, 2023Arm Mali Graphics Processing Unit (GPU) Denial of serviceCVE-2023-26083Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.Exploited1.2% likelyExploit code
- 8.8HighOct 25, 2022Arm Mali Graphics Processing Unit (GPU) Memory corruptionCVE-2022-38181Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.Exploited18% likelyExploit code
- 7.8HighMar 3, 2022Arm Mali Graphics Processing Unit (GPU) Memory corruptionCVE-2022-22706Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.Exploited1.1% likelyExploit code
- 8.8HighMay 10, 2021Arm Mali Graphics Processing Unit (GPU) Memory corruptionCVE-2021-28664Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes.Exploited5.4% likelyExploit code
- 8.8HighMay 10, 2021Arm Mali Graphics Processing Unit (GPU) Memory corruptionCVE-2021-28663Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.Exploited12% likelyExploit code
- 5.5MediumMay 25, 2021Arm Trusted Firmware Memory corruptionCVE-2021-27562Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers.Exploited3.1% likely
Top products
- Bifrost GPU Kernel Driver6 CVEs in the last year
- mbed tls5 CVEs in the last year, 2 critical
- 5th gen gpu architecture kernel driver3 CVEs in the last year
- Valhall GPU Kernel Driver2 CVEs in the last year
- Valhall GPU Userspace Driver1 CVE in the last year
- c1-ultra firmware1 CVE in the last year
- c1-pro firmware1 CVE in the last year
- Bifrost GPU Userspace Driver1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.